Cyber Security Evaluation Team (CSET) Member with Security Clearance

Command Post Technologies, Inc; Patuxent Highland (MD); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Great health benefits

Leadership training

401k with company match

ESOP

Career development

Tuition reimbursement

Flexible hours

Work/Life balance

Rewards and recognition

Paid Time Off

Parental Leave

Job summary

Command Post Technologies, Inc. seeks an experienced cyber security professional to perform red team operations and penetration testing for government customers. You will assess aeronautical systems, platforms, and networks including Windows and Linux environments, applying advanced tactics and tools.

The role requires a Top-Secret clearance with SCI eligibility. Travel up to 10% to CONUS sites is possible in support of assessments and delivery.

Qualifications

• Bachelor’s degree or equivalent experience in a related discipline.
• At least 10 years of pen testing, red team operations, and/or offensive security experience.
• Experience with open source and commercial tools like Metasploit, Burp Suite, Cobalt Strike, NMAP, Core Impact.
• Working knowledge of IP networks, routing, switching.
• Industry certifications like CEH/CISSP or equivalents required.
• Vendor certs: OSCE/OSCP/GXPN desirable within 6 months.

Responsibilities

• Perform adversarial threat emulation (Red Teaming) and penetration testing for aeronautical systems and platform IT.
• Conduct assessments on government networks including Windows and Linux, switches, routers, and network devices.
• Develop and apply advanced penetration testing concepts and tactics.
• Identify vulnerabilities in operational networks and programs.

Skills

Penetration testing

Red Teaming

Adversarial emulation

Networking

Windows/Linux

Education

Bachelor’s degree

Equivalent experience

Tools

Metasploit

Burp Suite

Cobalt Strike

NMAP

Core Impact

Job description

Key Responsibilities

• Working closely with our government customer, perform adversarial threat emulation (Red Teaming) and penetration testing to assess the performance of aeronautical systems, subsystems, and equipment (platform IT).
• Working closely with our government customer, perform adversarial threat emulation (Red Teaming) and penetration testing assessments on government networks including Windows domains, Linux systems, switches, routers, and other connected network devices.
• Apply and/or develop highly advanced principles, concepts, and tactics for penetration testing. ?
• Identify issues and vulnerabilities associated with operational networks and programs.

Travel Up to 10% of the time to CONUS sites as required.

Requirements

* All applicants for this position must hold a current Top-Secret clearance with the ability to obtain and maintain SCI eligibility

• Bachelor’s degree from an accredited college in a related discipline, or equivalent experience/combined education and/or advanced certification.
• At least 10 years of pen testing, red team operations, and/or offensive security experience including experience conducting on-net assessments
• Experience operating open source and commercial tools such as Metasploit, Burp Suite, Cobalt Strike, NMAP, Core Impact, etc.
• Working knowledge of IP network protocols, subnetting, routing, switching, etc.
• Experience in one or more of the following cybersecurity disciplines: * Penetration testing of modern Windows and Linux operating systems and IP-based networks * Exploit and malware development targeting modern operating systems and defenses * Reverse engineering * Web application penetration testing * Software development * Hardware hacking * Cryptography * Software defined networks * Digital forensics * Control systems * Radio Frequency (RF) * Ability to work in a diverse team environment
• Industry certification of EC-Council Certified Ethical Hacker (C|EH) and ISC2 Certified Information Systems Security Professional (CISSP) or their equivalents are required
• Be able to obtain one or more of the following vendor certifications within 6 months of being hired: * Offensive Security Certified Engineer (OSCE) * Offensive Security Certified Professional (OSCP) * GIAC Certified Exploit Researcher and Advanced Penetration Testers (GXPN)

Desired Qualifications

• Cyber related military training courses such as Title 10 Interactive On-Net Operator Course, Joint Cyber Analysis Course (JCAC), and Cyber Operations Specialist Qualification Course
• Industry certification of Offensive Security Certified Professional (OSCP) is highly desirable
• Specialization in web application penetration testing is a plus
• Experience with WiFi and/or Software Defined Radio (SDR) hacking is a plus
• Experience with red team / adversarial emulations is a plus
• Experience executing Close Access Team (CAT) assessments is a plus
• Experience with weapon systems assessments is a major plus
• Experience with bash scripting, Python, and/or PowerShell is a major plus
• Experience working in a cyber range is a major plus

About us

We are Command Post Technologies, Inc. (CPT). CPT is a Service-Disabled, Veteran-Owned Small Business (SDVOSB), providing engineering services in the areas of Cyber Security, Software Development, Test and Evaluation, and Strategic Planning. CPT employees appreciate working in a caring environment that promotes a healthy work-life balance. As individuals, we come together as a team, supporting a culture rooted in our core principles of integrity, determination, and innovation. In all of CPT’s collaboration efforts, our team prioritizes communication, accountability, and being resourceful in order to maximize efficiency and results.

Command Post Technologies, Inc. (CPT) is a Service-Disabled Veteran-Owned Small Business (SDVOSB) founded in 2008 and headquartered in Suffolk, VA with personnel in various states including Virginia, Maryland, Florida, and Texas. With 2/3 of our staff being former military, CPT firmly believes in employing veterans. Command Post Technologies, Inc. is a unique provider of innovative solutions that enhance our corporate clients’ productivity and empower our government clients with the ability to protect against all enemies: foreign and domestic. CPT adapts its successful military experiential approach to the needs of leaders in a global business environment and provides an elite leadership curriculum that results in a world‑class, leadership‑altering event.

What’s In It for You

• Great health benefits (for more info contact us directly)
• Leadership training
• 401k with generous company matching
• Employee Stock Ownership Plan (ESOP)
• Career professional development
• Tuition reimbursement
• Flexible hours
• Work/Life balance
• Rewards and recognition
• Paid Time Off
• Parental Leave

Command Post Technologies, Inc. (CPT) is a Service-Disabled Veteran-Owned Small Business (SDVOSB) founded in 2008 and headquartered in Suffolk, VA with personnel in various states including Virginia, Maryland, Florida, and Texas. With 2/3 of our staff being former military, CPT firmly believes in employing veterans. Command Post Technologies, Inc. is a unique provider of innovative solutions that enhance our corporate clients’ productivity and empower our government clients with the ability to protect against all enemies: foreign and domestic. CPT adapts its successful military experiential approach to the needs of leaders in a global business environment and provides an elite leadership curriculum that results in a world‑class, leadership‑altering event. We consider applicants without regard to race, color, religion, age, national origin, ancestry, ethnicity, gender, gender identify, gender expression, sex, sexual orientation, marital status, veteran status, disability genetic information, citizenship status, or membership in any other group protected by federal, state, or local law. We take affirmative action to ensure equal opportunities for employees and potential employees without regard to race, color, religion, age, national origin, ancestry, ethnicity, gender, gender identity, gender expression, sex, sexual orientation, marital status, veteran status, disability genetic information, citizenship status, or membership in any other group protected by federal, state, or local law. We abide by the Pay Transparency Nondiscrimination Provision and will refrain from discharging or otherwise discriminating against employees or applicants who inquire about, discuss, or disclose their compensation or the compensation of other employees or applicants.